Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/330269c7-b3f7-3f50-b253-09ee08ebac4d.roa
File: 330269c7-b3f7-3f50-b253-09ee08ebac4d.roa (raw, json)
Hash identifier: yI1ZaCFPf9h4Nj+Pa3WvPbYF0eri3HpQHZE8c3CIafU=
Subject key identifier: 74:F3:C8:C3:63:78:59:5B:EE:9A:16:7D:E3:B5:E7:15:06:E8:12:65
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246D17D80AA9CE0B5246DC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/330269c7-b3f7-3f50-b253-09ee08ebac4d.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 206.124.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:d1:7d:80:aa:9c:e0:b5:24:6d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=1181aff2-6522-4869-a6cd-03609f1abddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:46:d5:8b:28:58:9b:e8:7f:bc:d9:e3:8b:5b:
43:19:6e:cf:10:c0:66:61:46:06:32:bc:9a:87:58:
d7:1a:38:04:82:72:c1:b2:3d:80:77:a8:5b:f6:e3:
b8:75:33:8a:9b:f2:23:81:1c:29:8a:bb:ed:b3:b7:
ce:0b:12:ed:4f:cf:0b:f4:a9:b6:cf:9e:6e:26:86:
5e:ac:42:74:74:40:fc:dc:a5:4a:43:ee:bb:58:17:
da:89:b0:69:ab:97:93:60:7b:8a:67:3f:2f:de:c1:
01:0d:6b:fd:d1:3b:f7:81:3c:86:20:47:c0:08:a0:
6c:62:f9:97:91:2b:de:e3:4e:2d:56:30:b2:f7:57:
de:4f:b1:e1:01:66:62:1e:28:2a:98:ff:2b:39:a0:
93:9d:d1:2b:7b:38:c2:49:97:cd:14:a8:21:2c:00:
de:39:f7:0d:b5:24:62:bc:59:2f:81:ab:fc:fe:72:
2c:8c:5c:75:b5:b8:cb:9b:86:0d:51:e1:f8:ab:bd:
6b:07:61:a1:25:57:6a:ed:f0:b3:5a:9d:57:f1:a8:
fd:28:31:db:97:55:68:16:f6:55:18:56:a4:57:af:
72:c7:fd:89:a4:48:e1:00:90:69:d9:72:76:a4:04:
10:cc:73:cc:85:18:f9:be:f1:64:75:66:95:72:a1:
9d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F3:C8:C3:63:78:59:5B:EE:9A:16:7D:E3:B5:E7:15:06:E8:12:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/330269c7-b3f7-3f50-b253-09ee08ebac4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
206.124.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:fb:82:5b:85:a3:89:2d:c9:18:3e:2c:40:a4:71:1b:00:4d:
b1:b0:02:c7:8d:7e:a2:00:f4:60:f8:95:59:d0:de:34:7d:1c:
0a:1f:5b:73:43:5f:74:80:4d:87:02:73:43:35:5d:aa:5c:f0:
c6:f7:92:c7:48:45:28:80:e5:cd:35:ca:fb:66:33:cc:56:54:
b6:c2:50:28:a2:8e:9a:33:0c:f5:37:d0:da:7f:77:3b:7c:90:
0e:a5:8d:cb:60:e9:ec:33:eb:49:2d:34:11:92:75:d5:6b:c2:
00:2d:2f:ee:78:63:dd:85:79:52:82:65:9f:c2:2d:68:07:f5:
27:19:10:f3:90:82:fe:1d:94:4a:1f:e2:b3:5e:1b:c5:47:15:
9e:b2:2e:36:84:c0:73:25:b8:20:0c:8e:5f:f9:5e:9c:59:f7:
65:a4:f0:5b:c7:ca:0a:01:95:cd:51:2d:60:e5:87:ff:e0:1e:
1d:e9:16:e5:37:25:41:55:64:1a:f3:fa:6c:c9:d5:a9:e7:a4:
1c:13:5b:64:cd:fe:c7:9e:39:73:24:db:90:ea:bd:6d:d4:ec:
8e:8c:b1:fa:76:ea:25:c4:62:b1:ba:1c:37:0e:0c:70:a0:ee:
5c:9a:9a:9c:a7:47:a8:61:df:6e:96:13:4c:5c:ad:0e:e6:a1:
7d:9f:2b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:44:10 2025 by rpki-client